Full document
This document is written in a practical and conservative way and may be updated as Abistu develops.
1. Purpose of this Privacy Policy
This Privacy Policy explains how Abistu collects, uses, stores, shares, and protects personal data in connection with the service.
It is part of Abistu Legal Foundation v1 and is prepared before open registration, public commercial availability, or payment features are enabled.
2. Current operator status
Abistu is currently being prepared as an early-access service. Full legal operator details will be provided before public commercial launch, open registration, or payment availability.
Until that information is finalized, this page should be treated as an early legal foundation, not as a final commercial privacy notice.
3. Data Abistu may collect
Depending on how the service is used, Abistu may process account information, email addresses, authentication data, gallery titles, gallery descriptions, uploaded images, generated gallery files, client request details, selected item data, item comments, general request messages, technical logs, security records, support messages, and cookies or similar technologies.
4. Gallery and image data
Uploaded images are processed to create optimized gallery files, previews, and thumbnails for online viewing.
This processing may include resizing, compression, format conversion, metadata handling, and storage of generated files.
Standard Abistu galleries should not be described as unreadable by Abistu or as end-to-end encrypted storage unless a specific encrypted gallery mode is implemented and clearly enabled.
5. Client request data
When a gallery viewer submits a request, Abistu may store the viewer name, email address, general message, selected items, item-specific comments, request timestamps, and technical information needed to operate and secure the request flow.
6. Why Abistu processes data
- To create and manage accounts.
- To upload, process, store, and display gallery files.
- To let gallery viewers submit selections, comments, and contact details.
- To send service-related email notifications and request copies.
- To secure the service, prevent abuse, diagnose errors, and maintain system reliability.
- To respond to support, privacy, or abuse requests.
- To comply with legal obligations where applicable.
7. Controller and processor roles
For account, service, security, support, and operational data, Abistu may act as a controller because it determines how and why that data is processed.
For images and client data uploaded by a business user for that user's own clients, the user may act as controller and Abistu may act as a processor or service provider. A dedicated Data Processing Addendum may be added later for business users.
8. Cookies and similar technologies
Abistu may use cookies or similar technologies that are necessary for login, session management, security, and service operation.
If analytics, marketing, or non-essential cookies are added later, Abistu should provide appropriate notice and consent controls before using them.
9. Service providers
Abistu may use infrastructure, hosting, email, storage, security, and other service providers to operate the service.
A dedicated subprocessors list may be added later for business and GDPR-related use.
10. Retention, deletion, and backups
Abistu may keep data for as long as needed to provide the service, maintain security, respond to requests, prevent abuse, comply with legal obligations, and operate backups.
When content is deleted from active service areas, residual copies may remain for a limited time in backups, logs, or system recovery storage before normal cleanup.
11. Security
Abistu uses reasonable technical and organizational measures designed to protect personal data and uploaded content.
No online service or storage system can guarantee complete security, permanent availability, or uninterrupted operation.
12. Your rights
Depending on applicable law and your relationship to the data, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data.
Some requests related to gallery content uploaded by a business user may need to be handled by that user as the primary controller.
13. Contact
For privacy questions or requests, contact info@abistu.com.